About This Privacy Statement
This privacy statement describes how NIH processes your personal data in Søknadsweb. It explains which personal data are processed, how they are processed, who is responsible, your rights, and who you can contact.
What Are Personal Data?
Personal data include all types of data, information, or assessments that can be linked to you as an individual. Information that cannot identify a person on its own may still be personal data when combined with other information that indirectly identifies an individual.
Purpose of Processing Personal Data in Søknadsweb
The purpose of processing personal data in Søknadsweb is to allow you to apply for admission to studies, courses, and other educational activities at NIH. Søknadsweb is used to register applications, upload documentation, and communicate with applicants.
Legal Basis
Processing of personal data in Søknadsweb is necessary for NIH to:
- process applications for admission
- assess qualifications
- carry out tasks required under the Universities and University Colleges Act
The processing is authorized under:
- Universities and University Colleges Act §2‑8
- GDPR Article 6(1)(e), public interest
- GDPR Article 6(1)(c), legal obligation
In some cases, NIH may also rely on your consent.
Personal Data Processed in Søknadsweb
The following personal data may be processed in Søknadsweb:
- Name
- National identity number or D‑number
- Contact information (address, email, phone number)
- Citizenship
- Educational background
- Uploaded documents (certificates, diplomas, transcripts, etc.)
- Information about your applications
- Consents you have given
Sensitive personal data are generally not processed, but may appear in documents you upload.
Sources of Personal Data
Personal data in Søknadsweb come from:
- Registrations you make yourself
- Documents you upload
- Data retrieved from the National Diploma Database (NVB), if you consent
- Data retrieved from other institutions that use FS, if relevant
Storage Period
Personal data registered in Søknadsweb are transferred to FS. Personal data in FS are generally stored indefinitely.
Exceptions:
Documents for applicants who do not receive an offer are deleted after the admission process is completed.
- Automated Processing
Some processes in Søknadsweb are partially or fully automated, including:
- qualification assessment
- calculation of admission points
- allocation of study places
Disclosure of Personal Data
NIH may disclose personal data to external systems when necessary. Your personal data are not transferred outside the EU/EEA.
Your personal data may be disclosed to:
- Sikt – Norwegian Agency for Shared Services in Education and Research
Sikt develops and operates Søknadsweb and FS. Employees who require access for their work may access your personal data for support and troubleshooting.
- Feide
You may log in using Feide. Employees who require access for their work may access your Feide name and IP address for support and troubleshooting. Personal data stored by Feide are deleted after six months.
- Digitaliseringsdirektoratet (Digdir)
If you log in using MinID, BankID, Buypass, or Commfides via ID‑porten, Digdir may access your national identity number, contact information, and limited login history for support and troubleshooting.
Security of Personal Data
NIH conducts regular risk and vulnerability analyses to ensure the security of your personal data in Søknadsweb. Access controls and other security measures are in place to prevent unnecessary access to your data.
Your Rights
See more about your right to access, correction, restriction, deletion, and objection regarding your personal data. You also have the right to complain about the processing of your personal data.
Contact
Data Controller
The Managing Director of NIH is the data controller for personal data in Søknadsweb. The system is managed internally by the Academic Affairs Office.
To exercise your rights, contact: ses@nih.no
NIH will respond without undue delay and no later than 30 days.
Data Protection Officer
NIH has a Data Protection Officer who safeguards the privacy interests of students and applicants. Since April 2024, NIH has used Sikt’s Data Protection Officer service.
Email: personvernombud@nih.no